Legal

Privacy Policy

Effective date: July 13, 2026.

Your privacy is important to us. This policy explains how Magic Lens Inc. (“Magic Lens,” “we,” “us,” or “our”) handles personal information when you use the MagicLens website, Video Momentos, Studio, Studio Pro, and our related tools, workflows, and services (collectively, the “Services”).

1. Our privacy approach

We design our systems to protect personal information and use administrative, technical, and organizational safeguards appropriate to the information we handle. No online service can guarantee absolute security or privacy, and this policy does not make that guarantee. We aim to collect and retain only what is reasonably needed for the purposes described below and to explain when information is processed by another company.

2. Information we collect

  • Account and profile information: your email address, user ID, display name, username, authentication records, account status, and settings. Our authentication provider handles credentials; we do not store your password in readable form.
  • User Content: prompts, instructions, text, uploaded and reference images, video, audio, documents, workflows, model settings, and other inputs you submit.
  • Generated and project content: outputs, previews, intermediate files, Studio assets, Production Assets, workflow definitions, selections, and related creation history.
  • Purchase information: products, credit balances, transaction status, billing country, payment processor identifiers, and limited payment metadata. Our payment processor handles full card details; Magic Lens does not receive or store complete card numbers.
  • Usage and technical information: IP address, browser and device information, session and request identifiers, dates and times, pages and features used, model and workflow activity, diagnostics, security events, and error or performance logs.
  • Communications: messages, support requests, feedback, and records of our responses.

We collect information directly from you, automatically when you use the Services, and from service providers such as authentication, payment, hosting, email, and AI model providers.

3. How we use information

We use personal information to:

  • provide, personalize, operate, and deliver the Services and generated content you request;
  • authenticate users, maintain accounts, process purchases, manage credits, and deliver receipts;
  • store projects and assets, provide downloads, and support creation history and follow-up workflows;
  • filter and review prompts or media for safety, enforce our Terms of Service, prevent fraud and abuse, and protect users, Magic Lens, and others;
  • respond to support requests and communicate service, account, security, or policy updates;
  • troubleshoot failures, monitor reliability and performance, evaluate output quality, and improve our products, workflows, safety controls, and user experience;
  • create aggregated or de-identified statistics that do not reasonably identify a person; and
  • comply with law, court orders, lawful requests, tax and accounting obligations, and dispute requirements.

Depending on the context and the law where you live, we rely on your consent, the need to perform our agreement with you, our legitimate interests in operating and securing the Services, or compliance with legal obligations. We will seek additional consent where required for a materially different purpose.

4. AI model providers

MagicLens uses third-party AI model providers to process requests. When you select or use a model, we may send the provider your prompt, relevant uploads or references, model settings, and limited technical data needed to generate the result, troubleshoot the request, or enforce safety requirements. Providers may process this data outside Canada.

Provider practices vary by model, account configuration, and then-current terms. Some providers or configurations may permit submitted content to be retained or used to operate, secure, evaluate, improve, or train their models or services. Where a provider will use personal information for its own training or improvement purposes, we will provide notice and obtain consent where required. Review any model-specific notice before submitting sensitive, confidential, regulated, or proprietary content. If a provider’s practices are not appropriate for your content, do not use that model.

5. When we share information

We may share information with:

  • AI providers to generate, transform, analyze, or moderate content;
  • infrastructure and account providers for database, private object storage, authentication, hosting, networking, and queued processing;
  • payment providers to process purchases, prevent fraud, and manage disputes;
  • communications providers to deliver account, receipt, security, and service emails;
  • professional advisers and transaction participants where reasonably necessary for legal, security, audit, financing, merger, acquisition, reorganization, or sale purposes; and
  • authorities or affected parties when we reasonably believe disclosure is required by law or is necessary to protect a child, prevent serious harm, investigate fraud or abuse, enforce our agreements, or protect legal rights.

Current service-provider categories include Supabase for authentication, database, and storage services; Google Cloud for application infrastructure; Stripe for payments; and Resend for transactional email. Providers may change as our Services evolve. We do not sell or rent personal information, and we do not use it for third-party targeted advertising.

6. International processing

Magic Lens and our providers may process personal information in Canada, the United States, and other countries where a selected provider operates. Privacy laws in those locations may differ from those where you live, and courts, law enforcement, or national-security authorities may lawfully access information there. We use contracts and other measures intended to require service providers to protect personal information while processing it for us, subject to applicable law.

7. Storage, retention, and deletion

We may temporarily store inputs, outputs, prompts, run records, and related technical data to provide the Services, deliver results, investigate errors or abuse, and improve reliability, safety, and user experience. Retention varies by the kind of information, its sensitivity, whether you save it to your account, provider requirements, and our legal, security, accounting, and dispute obligations.

  • Content saved to your account, Studio, Studio Pro, or Your Assets may remain available until you delete it or request deletion. Generated outputs may be retained separately from their source inputs.
  • In supported Video Momento flows, temporary source images detected as containing a child, including framed or cropped working copies, are deleted when the workflow finishes and no later than 24 hours after the original upload. Other approved temporary Momento source images and their framed or cropped copies are deleted 90 days after the original upload. If you choose an image from My Assets, these deadlines apply only to the temporary Momento copy; the saved My Assets original remains subject to the normal account retention rules. Generated results and limited safety, consent, run, and deletion records may be retained separately as otherwise described in this policy.
  • Studio and Studio Pro are user-directed creation tools. Their inputs, project files, intermediate assets, and outputs may be stored as part of your account or asset library until you delete them or request deletion.
  • Transaction, credit, security, moderation, and audit records may be retained after content or account deletion where reasonably necessary for legal compliance, fraud prevention, safety, accounting, or dispute resolution.

You may request deletion of your content or account at any time using available in-product controls or by contacting us. Deletion removes content from active systems within a reasonable period, subject to legal exceptions. Residual copies may remain temporarily in restricted backups, and information already processed by a third-party provider is subject to that provider’s deletion process and legal obligations. Content you shared or downloaded outside MagicLens cannot be recalled by us.

Suspected child sexual abuse or exploitation material is not handled as an ordinary child-visible family upload. We may block it and preserve or disclose relevant content and records where required to report suspected offences, safeguard evidence, protect a child, or comply with legal process.

8. Children’s privacy

Our family-oriented Video Momentos are intended to be used by parents and guardians, not by children acting as account holders. Children under 13 may not create accounts. A parent or guardian must authorize and supervise any submission involving a child and must have the right to provide the child’s information and image. We may request confirmation of that authority and refuse or delete content when it is absent.

If you believe a child submitted personal information without appropriate authorization, contact us so we can investigate and take appropriate action.

9. Security

We use measures designed to protect personal information against loss, theft, and unauthorized access, use, disclosure, copying, or modification. These may include access controls, private storage, signed and time-limited asset links, encryption in transit, credential separation, logging, and employee or contractor access limited to legitimate operational needs. No safeguard eliminates all risk, so you should use a strong unique password and avoid submitting information that is not needed for your creation.

10. Your privacy choices and rights

Subject to applicable law and limited exceptions, you may ask us to provide access to your personal information, explain how it has been used or disclosed, correct inaccurate information, delete information, withdraw consent for future processing, or close your account. Withdrawing consent may prevent us from providing some Services and does not affect processing already lawfully completed.

Send a request to the email below. We may need to verify your identity and authority before responding. We aim to respond within 30 days, or within another period permitted by applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator where you live.

11. Cookies and similar technology

We use cookies, browser storage, and similar technology that are necessary for authentication, security, account state, and core site preferences. If we introduce non-essential analytics, advertising, or tracking technology, we will update our notices and provide choices where required.

12. Changes to this policy

We may update this policy as our Services, providers, or legal obligations change. We will post the updated policy and revise the effective date. If a change materially affects how we handle personal information, we will provide additional notice or seek consent where required.

13. Contact our Privacy Officer

Questions, complaints, access requests, or deletion requests may be sent to the Privacy Officer at Magic Lens Inc. via [email protected].